Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
File: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft (raw, json)
Hash identifier: jI4CavyuPMlcqsL4JJNnH903GfvWxFJ7LwqF6SFqQ/U=
Subject key identifier: 17:8D:B5:B8:8C:43:5D:EB:1C:54:D7:FA:F2:8B:81:D2:4D:6B:CB:70
Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
Certificate issuer: /CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Certificate serial: 019D25BAC4B0C14BABA1F859F65926EAD863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
Manifest number: 1891
Signing time: Wed 25 Mar 2026 16:01:30 +0000
Manifest this update: Wed 25 Mar 2026 16:01:30 +0000
Manifest next update: Thu 26 Mar 2026 16:01:30 +0000
Files and hashes: 1: 1-ojtBFfG2H1rWqjbXk4N7WD3PpY.roa (hash: 33NVVlGbTWQg3lb1uDpxYt5Pr6SGR6CWL3Kw3mH/dfw=)
2: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl (hash: iDvyUrVjYJVeERnIoie46Cke5cRQCsDjDfWnmdZ/ebg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:c4:b0:c1:4b:ab:a1:f8:59:f6:59:26:ea:d8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Validity
Not Before: Mar 25 16:01:30 2026 GMT
Not After : Mar 26 16:01:30 2026 GMT
Subject: CN=178db5b88c435deb1c54d7faf28b81d24d6bcb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f1:4d:26:e5:f3:7e:8d:bf:ce:80:1c:5a:a7:
59:0a:39:66:fc:d5:6b:0b:74:04:a0:6c:ea:00:54:
4d:ca:42:1d:c4:bc:c1:35:7e:01:8d:43:7b:fb:57:
38:e8:f0:60:cb:bb:22:da:1f:6d:8c:bc:f3:1e:19:
91:93:a1:26:c9:ba:2b:e9:b3:fb:ca:37:b7:62:48:
c0:7a:ae:c3:ca:da:27:d7:41:6f:30:95:ba:27:3a:
0c:17:c1:23:d4:ee:17:a7:34:ed:81:28:d6:57:58:
c0:f7:60:65:e3:b1:9c:9e:8d:77:ba:ae:9c:0f:3b:
e4:34:a0:92:3e:73:cb:2c:6e:23:20:5c:bd:98:b1:
95:d5:a2:f8:96:d3:07:fb:9f:d6:ec:d5:62:54:58:
67:f6:19:32:df:74:74:50:4c:45:2f:72:df:b6:98:
5b:b6:b3:8f:25:e5:b9:8d:66:8a:4a:39:56:25:79:
9c:3f:f6:c6:03:5f:cb:83:df:08:02:3a:1e:8a:b5:
53:1a:2a:53:1a:3f:bf:04:27:a2:0f:ab:79:ae:a0:
83:f5:44:75:94:e3:4c:fc:1e:24:98:c8:f3:fb:c0:
5b:8e:09:d5:34:57:0b:bf:a7:ee:bd:47:2b:3b:7d:
a0:93:fe:f8:ac:14:c1:f4:a3:dc:d7:e9:3a:be:4f:
e1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8D:B5:B8:8C:43:5D:EB:1C:54:D7:FA:F2:8B:81:D2:4D:6B:CB:70
X509v3 Authority Key Identifier:
keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:34:e1:f3:ba:85:f3:29:e5:83:b1:1e:b0:c9:bd:a2:b0:f6:
e0:ae:fb:a0:58:b9:63:c1:da:32:64:12:a8:ee:73:ab:dc:c0:
8f:ec:f1:2d:dc:87:e3:ef:bc:60:4d:d4:14:db:0e:1b:06:37:
01:3f:86:6c:ba:bf:dc:29:6e:e0:93:ba:0b:99:44:20:34:b4:
8e:09:6c:34:f7:68:bb:f7:40:7f:16:93:aa:8d:d0:fa:8e:d4:
b3:af:fb:37:e3:58:cf:1e:29:77:57:b6:20:55:75:2e:30:88:
c2:34:7e:d1:3c:12:54:33:64:ab:f2:b0:bb:60:3e:b1:e2:9e:
74:61:9b:2e:8e:6b:15:e3:d7:ae:7d:e5:3b:ac:be:85:da:5a:
e7:48:34:dd:dc:15:0a:de:6e:fd:79:ee:b4:81:08:41:11:95:
f3:c2:35:b8:ab:59:72:d4:be:f0:03:fe:51:97:ef:61:32:eb:
eb:01:89:02:1c:70:6b:6e:fa:ce:5a:37:eb:91:a8:72:bd:73:
07:90:77:68:7b:3f:eb:ef:62:2f:21:99:18:01:90:44:12:de:
17:4c:5b:b9:81:14:5a:ac:6e:6d:c0:40:6c:02:96:3c:1b:5e:
83:11:11:bb:6e:28:2a:12:35:ee:3c:27:18:ec:51:66:a6:25:
87:92:4e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:37 2026 by rpki-client